4 matches found
PT-2024-27719 · Unknown · Datalife Engine
Name of the Vulnerable Software and Affected Versions: DataLife Engine versions prior to 17.1 Description: The issue is related to SQL Injection in the dboption component. Recommendations: For versions prior to 17.1, consider restricting access to the dboption component to minimize the risk of...
CVE-2024-37699
CVE-2024-37699 affects DataLife Engine (DLE) v1.7.1 and earlier; the issue is a SQL injection in the dboption component. The root cause is inadequate input handling in dboption leading to SQL injection, with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8, network attac...
CVE-2024-37699
An issue in DataLife Engine v.17.1 and before is vulnerable to SQL Injection in dboption...
DataLife Engine SQL Injection Vulnerability
DataLife Engine DLE is a CMS from DataLife Engine, Inc. that allows users to create and manage their own websites without programming. A SQL injection vulnerability exists in DataLife Engine v.17.1 and earlier versions, which stems from dboption being vulnerable to SQL injection attacks...